Discover and read the best of Twitter Threads about #lockbitblack
Most recents (1)
The leak of a builder for #LockBitBlack might have given us an intriguing hint. Take a look at the screenshot for the default config file. See the password 123QWEqwe? Keep it in mind for now. 🧵
For most of the leaks of data stolen by #LockBit affiliates, we have a name. Like in this screenshot. In this case, it’s most likely the default name for Windows VPS machines at some hosting providers. @SHODAN data suggests that. 
@SHODAN Now, where does that machine name come from? It’s set by #StealBit, the homemade exfiltration tool of #LockBit. @cybereason dug into it. cybereason.com/blog/research/…
